b764eedc470b29c447760da4004d3565 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b764eedc470b29c447760da4004d3565
Size

48KB
MD5

b764eedc470b29c447760da4004d3565
SHA1

9dd669955861f265735a2daadc0adefe235de496
SHA256

c7b1306b60f8e616dc410fb2903ef7bff88a8a7473ff6179e1795b83e0e56d79
SHA512

c013eb468642800865001a930a8304e37dda6e0b4c079e88d5d2b5267fb5e93973dfd346c010a5b415e0a67c530a126714b6f3f6d73d1796986830c1433b4dd3
SSDEEP

384:1MISaDy9dZ12iDb60Y+SN3DIBQJRSeLOI90aqX87v6z564uUGZvLaLzF+e7slVXM:TWn5NUaeZIAappGZeWVMp4y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b764eedc470b29c447760da4004d3565

Files

b764eedc470b29c447760da4004d3565
.exe windows:4 windows x86 arch:x86

dc7d97bb5c990e381c723b8e67b1cd5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
free
__set_app_type
calloc

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

kernel32

GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE